[apparmor] [patch] Samba Active Directory authentification

[Steve Beattie]

On Sat, Aug 27, 2011 at 01:49:16PM +0200, Christian Boltz wrote:
> Am Samstag, 27. August 2011 schrieb Steve Beattie:
> > On Sat, Aug 27, 2011 at 02:22:07AM +0200, Christian Boltz wrote:
> > > +  /proc/sys/kernel/core_pattern r,
> > 
> > I'm confused by the need for this in both profiles. The proc/sysctl
> > entry /proc/sys/kernel/core_pattern defines what happens when a
> > user space app crashes and a core file should be generated; this is
> > typically either left alone or set to pipe into a debugging utility
> > like apport or abrtd. It makes no sense to me why turning on Active
> > Directory auth would cause this to show up or why it would be useful
> 
> Maybe you need active directory to crash samba? ;-)

Heh. Actually, it's not entirely out of the realm of the possibilities
that samba treats an added rejection caused by trying to run with AD
as an abort/crash, cuasing an internal crash handler to get triggered.

> > I was wondering why these showed up under the nmbd profile and not
> > the smbd one, but smbd is covered by /var/lib/samba/** rwk (and it
> > looks like from the novell bug report that /var/lib/ was the actual
> > path of the rejections). So I'm okay with these, ACK.
> 
> Just to be sure: was this a formal ACK for the whole patch?
> If I don't hear/read the opposite, I'll commit it tonight (= in 6 
> hours).

When I wrote it, it wasn't; but thinking it over more, yeah, ACK for the
whole patch.

Thanks!

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20110827/d9e5d025/attachment.pgp>